Darren Shepherd created CLOUDSTACK-5017:
-------------------------------------------

             Summary: If SSVM is unavailable DownloadCommands will be routed to 
mgmt server
                 Key: CLOUDSTACK-5017
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-5017
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: Storage Controller
    Affects Versions: 4.2.0
            Reporter: Darren Shepherd
            Priority: Blocker


If a SSVM in the zone is not available, meaning either it does not exist or the 
host entry is not Up or Connecting, DownloadCommand will get routed to 
LocalHostEndpoint.  This is particularily dangerous in a NFS setup.  If the 
mgmt server handles the DownloadCommand it has sudo access to mount NFS and 
perform the action.  This mean the mgmt server is now in the data path, or 
worse, it could hang if it does not have network access to the NFS server.



--
This message was sent by Atlassian JIRA
(v6.1#6144)

Reply via email to